
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/af09b857-8871-38da-9b52-df4eb107647c.roa
File: af09b857-8871-38da-9b52-df4eb107647c.roa (raw, json)
Hash identifier: q8HNd1LDXcHNCCl+VsBFA83zGJr+AJToli4cCbCFkM4=
Subject key identifier: 1B:55:7D:15:57:13:A6:94:D4:DA:33:61:97:53:E5:F6:64:C0:BA:94
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584D40CA99A4D5CF431A67724100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/af09b857-8871-38da-9b52-df4eb107647c.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 20001
IP address blocks: 76.178.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:99:a4:d5:cf:43:1a:67:72:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=08f15c45-17f6-452e-b8b6-bff9e4b078fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ee:0f:ad:a3:98:2d:7d:db:7b:2d:f1:4c:03:
80:2f:53:b8:f7:1a:a6:14:a6:ba:43:7e:aa:b8:c8:
ca:8f:73:3b:df:d4:4c:c9:63:43:df:75:48:da:b5:
32:bf:81:ad:4e:ba:7d:7c:ac:62:98:02:0e:cd:24:
45:49:8d:c8:53:60:8f:ae:f1:cc:00:6f:9b:bc:92:
8e:02:37:e0:25:4c:5f:84:5b:c7:c1:4f:11:e6:9c:
6a:f4:18:5d:57:86:e4:43:7f:b7:88:90:ee:f9:eb:
24:25:f1:b0:f6:40:25:2e:3c:de:42:55:23:2f:06:
39:5b:08:49:46:52:03:05:e9:09:d4:2b:6b:01:96:
10:0a:82:6b:3f:37:bb:e5:c2:4f:84:55:37:43:58:
47:64:39:f4:b4:dd:27:03:c6:ad:c1:6d:58:39:0e:
ec:32:0c:46:5c:27:30:c1:44:85:fa:06:04:ab:ec:
f7:4c:60:4f:2e:0a:25:70:76:d4:67:5b:f2:39:7e:
2d:2d:3d:5e:2e:98:80:68:83:da:80:75:f0:5f:90:
27:ff:b7:e7:d2:c4:0a:a3:f9:62:3b:43:7e:a7:a0:
80:da:2c:11:7d:31:fb:88:c7:a5:4a:68:e6:30:44:
93:96:a2:fe:9d:dc:7c:6d:96:bc:b4:ba:2e:98:6c:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:7D:15:57:13:A6:94:D4:DA:33:61:97:53:E5:F6:64:C0:BA:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/af09b857-8871-38da-9b52-df4eb107647c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.178.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:1d:c8:3c:3b:51:3c:9c:70:bd:a3:2d:10:49:e2:ab:56:32:
0a:e2:8a:1b:15:92:1d:cb:aa:58:41:a3:03:09:aa:c1:bf:23:
85:e2:7f:e1:23:a5:d5:52:09:b3:5a:e6:9a:94:7c:4a:fc:40:
64:75:25:af:97:c6:85:d9:6f:07:9d:f5:39:4e:24:71:6e:00:
a4:4f:9f:ba:14:00:6b:7d:1e:fc:1a:2e:e3:4f:ed:8f:b7:a8:
3b:bd:79:cd:99:fc:58:c2:3e:f6:ad:0c:48:9f:af:e6:ad:c6:
93:17:d7:b2:08:d8:6e:0c:04:05:97:a7:ad:4c:fe:9d:5d:79:
d0:73:fd:0c:0e:80:2a:7f:dc:db:74:32:c6:ad:fe:c7:d2:a5:
83:af:7f:3d:96:89:9b:c5:69:34:3e:0b:10:ef:15:fe:59:b3:
ee:76:2b:ff:e9:cb:69:11:14:2e:93:3d:ec:be:75:88:4d:36:
e9:d8:b5:9b:d0:ba:a7:9a:a6:25:0c:95:e4:a3:23:79:69:e0:
b8:00:21:cc:23:8d:b2:fe:82:5d:2b:b1:e9:83:2d:38:d3:8b:
79:48:d5:92:ae:31:8d:b5:cb:c1:b1:60:d9:2c:f2:cc:b6:41:
51:56:9f:69:0b:f4:1b:3f:7d:65:b5:4f:d6:bb:01:af:ac:37:
9a:14:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:46 2026 by rpki-client